Related Alerts

What are Related Alerts?

The Related Alerts feature on the Salem Alert Card allows security analysts to instantly view and understand all alerts that are associated with the same overarching threat action or incident. A single malicious action might trigger multiple alerts across various security tools (e.g., an initial phishing email, followed by a suspicious login, then unusual data access). This feature allows users to see that grouping and understand subsequent actions that were part of the initial incident.

Using Related Alerts

1. Navigate to an alert in enterprise chat or the Salem Browser Extension

1. Under Salem Investigation Context, select the blue Related Alerts button

2. A new menu will pop up detailing all associated alerts, their status and association type